Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cCv0D0cfcBaJy6KVZ_hdTKalCFU.roa
File: cCv0D0cfcBaJy6KVZ_hdTKalCFU.roa (raw, json)
Hash identifier: ra/UYlJryQoxiHNnWzCg/kI6q7Ye3Dvriprp+3tAZZA=
Subject key identifier: 70:2B:F4:0F:47:1F:70:16:89:CB:A2:95:67:F8:5D:4C:A6:A5:08:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018675CB8457DA4B59843E065B9055095379
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cCv0D0cfcBaJy6KVZ_hdTKalCFU.roa
Signing time: Tue 21 Feb 2023 21:05:17 +0000
ROA not before: Tue 21 Feb 2023 21:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:75ca:9c03/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:cb:84:57:da:4b:59:84:3e:06:5b:90:55:09:53:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 21:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=702bf40f471f701689cba29567f85d4ca6a50855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:5b:ea:1e:8a:02:a9:b5:5e:5d:f3:05:4a:
31:ac:ca:72:f7:9c:c4:44:3f:03:0b:88:4c:6d:ed:
71:2e:66:3b:be:2e:06:61:a1:da:40:82:77:22:33:
b2:3b:7d:ec:68:19:8d:a4:a9:45:e1:1f:61:42:58:
0b:c9:fd:22:e9:d6:36:ed:b0:f6:8b:2c:aa:78:42:
a0:48:1e:a0:b3:50:3f:76:5d:f8:f5:81:bd:af:ea:
1c:8c:89:76:30:78:3d:f5:99:7e:e6:37:2f:04:a0:
dc:32:c3:9d:56:a2:48:a6:a4:4c:a3:45:3b:a4:0c:
9e:17:fd:14:b7:d3:47:80:19:a0:11:3d:02:42:f2:
ae:f4:aa:1f:34:6b:fd:f6:33:1c:31:aa:cf:12:cb:
2a:ac:63:33:18:1d:df:ae:83:6c:de:6e:0e:46:ca:
df:f0:83:5c:b5:c4:2c:fd:1a:a9:a8:78:b9:f8:3e:
4a:a7:d7:79:74:f4:bd:8a:38:9d:f7:26:38:08:21:
b2:ca:cd:a6:9b:d3:5b:84:9d:26:26:ff:28:38:8d:
61:26:08:92:11:15:e0:57:db:e3:22:d0:c5:80:8c:
3d:ed:da:91:64:42:88:37:d7:4d:c5:3b:5a:bb:b1:
ea:7d:37:6a:f8:48:82:7d:e2:b7:bd:14:35:6f:d0:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2B:F4:0F:47:1F:70:16:89:CB:A2:95:67:F8:5D:4C:A6:A5:08:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cCv0D0cfcBaJy6KVZ_hdTKalCFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:fa:c9:65:6a:32:5a:fa:5b:82:41:d5:e0:9c:98:35:de:44:
1b:6a:4e:93:5e:f9:dd:e6:cb:26:e5:74:b7:0e:b3:a3:03:f1:
c9:88:d6:d7:1f:2b:ef:22:38:94:6f:d0:46:92:7f:06:1c:f0:
a3:86:1c:ed:60:d9:2e:df:6e:8c:32:32:15:9e:f1:17:05:bf:
e1:44:4c:58:5a:d3:a2:dc:78:93:2c:98:7d:11:0d:91:61:08:
2f:02:b7:ed:f4:a4:25:13:05:1f:66:7e:6c:33:48:2e:2c:2c:
85:c4:62:fe:d4:73:ab:41:a2:9d:ef:50:b4:50:c6:c1:e9:23:
2b:c4:50:51:20:ea:4b:af:af:a3:a6:87:c2:ec:44:f9:ee:66:
c6:56:c1:99:0f:31:e2:50:a1:b6:e1:01:5f:46:43:08:d7:ed:
1d:e2:32:4e:d9:a4:dd:a8:aa:cb:26:67:22:bf:ec:f1:2f:a1:
d4:ed:76:c0:77:19:72:19:bf:38:43:43:d0:46:11:72:05:94:
60:af:33:73:d8:4c:ab:df:6e:97:8e:71:19:fb:be:00:3f:39:
23:e2:28:0b:7a:5a:87:fe:9f:6e:60:07:86:ad:74:ee:05:72:
a7:48:63:5a:39:7c:f1:74:b1:61:20:49:7d:50:24:c4:32:7d:
b9:93:9c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:31 2025 by rpki-client